Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-38405

Siemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory Buffer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens JT2Go

Default version status: unaffected

  • 0 to < 13.2.0.7affected

Siemens Teamcenter Visualization

Default version status: unaffected

  • 12.4 to < 12.4.0.13affected
  • 13.1 to < 13.1.0.8affected
  • 13.2 to < 13.2.0.7affected
  • 13.3 to < 13.3.0.1affected

References